Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe "C:\Users\user\Desktop\derp.bin.dll",#1
|
 |
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\derp.bin.dll,DllGetClassObject
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\derp.bin.dll,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\derp.bin.dll,DllUnregisterServer
|
|
|
|
C:\Windows\System32\loaddll64.exe
|
loaddll64.exe "C:\Users\user\Desktop\derp.bin.dll"
|
||
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
|
C:\Windows\System32\cmd.exe
|
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\derp.bin.dll",#1
|
||
|
C:\Windows\System32\regsvr32.exe
|
regsvr32.exe /s C:\Users\user\Desktop\derp.bin.dll
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
193.32.176.22
|
unknown
|
Russian Federation
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FFDFB2F3000
|
unkown
|
page readonly
|
||
|
7FFDFB2E3000
|
unkown
|
page readonly
|
||
|
1C7B1198000
|
heap
|
page read and write
|
||
|
7FFDFB3DB000
|
unkown
|
page readonly
|
||
|
1D2A4B00000
|
heap
|
page read and write
|
||
|
16F5B8F0000
|
heap
|
page read and write
|
||
|
7FFDFB301000
|
unkown
|
page readonly
|
||
|
7FFDFB367000
|
unkown
|
page readonly
|
||
|
7FFDFB353000
|
unkown
|
page readonly
|
||
|
7FFDFB261000
|
unkown
|
page execute read
|
||
|
7FFDFB377000
|
unkown
|
page readonly
|
||
|
7FFDFB3F8000
|
unkown
|
page readonly
|
||
|
7FFDFB374000
|
unkown
|
page readonly
|
||
|
7FFDFB3B6000
|
unkown
|
page readonly
|
||
|
7FFDFB2E0000
|
unkown
|
page readonly
|
||
|
7FFDFB388000
|
unkown
|
page readonly
|
||
|
7FFDFB3B9000
|
unkown
|
page readonly
|
||
|
7FFDFB388000
|
unkown
|
page readonly
|
||
|
7FFDFB3E8000
|
unkown
|
page readonly
|
||
|
16F59E70000
|
heap
|
page read and write
|
||
|
7FFDFB2B8000
|
unkown
|
page read and write
|
||
|
7FFDFB398000
|
unkown
|
page readonly
|
||
|
7FFDFB2E0000
|
unkown
|
page readonly
|
||
|
7FFDFB3F8000
|
unkown
|
page readonly
|
||
|
7FFDFB3EB000
|
unkown
|
page readonly
|
||
|
7FFDFB364000
|
unkown
|
page readonly
|
||
|
1D2A6810000
|
heap
|
page read and write
|
||
|
7FFDFB2B8000
|
unkown
|
page read and write
|
||
|
7FFDFB367000
|
unkown
|
page readonly
|
||
|
7FFDFB2F3000
|
unkown
|
page readonly
|
||
|
65AF6FB000
|
stack
|
page read and write
|
||
|
7FFDFB364000
|
unkown
|
page readonly
|
||
|
7FFDFB260000
|
unkown
|
page readonly
|
||
|
7FFDFB304000
|
unkown
|
page readonly
|
||
|
7FFDFB3D7000
|
unkown
|
page readonly
|
||
|
7FFDFB325000
|
unkown
|
page readonly
|
||
|
7FFDFB364000
|
unkown
|
page readonly
|
||
|
13B000
|
stack
|
page read and write
|
||
|
7FFDFB304000
|
unkown
|
page readonly
|
||
|
7FFDFB314000
|
unkown
|
page readonly
|
||
|
7FFDFB353000
|
unkown
|
page readonly
|
||
|
7FFDFB374000
|
unkown
|
page readonly
|
||
|
7FFDFB322000
|
unkown
|
page readonly
|
||
|
7FFDFB335000
|
unkown
|
page readonly
|
||
|
1C671F30000
|
heap
|
page read and write
|
||
|
1C7B118D000
|
heap
|
page read and write
|
||
|
7FFDFB346000
|
unkown
|
page readonly
|
||
|
1C7B10E0000
|
heap
|
page read and write
|
||
|
7FFDFB3D7000
|
unkown
|
page readonly
|
||
|
7FFDFB3B9000
|
unkown
|
page readonly
|
||
|
7FFDFB356000
|
unkown
|
page readonly
|
||
|
7FFDFB409000
|
unkown
|
page readonly
|
||
|
7FFDFB367000
|
unkown
|
page readonly
|
||
|
7FFDFB325000
|
unkown
|
page readonly
|
||
|
7FFDFB2BE000
|
unkown
|
page readonly
|
||
|
7FFDFB314000
|
unkown
|
page readonly
|
||
|
7FFDFB3D7000
|
unkown
|
page readonly
|
||
|
7FFDFB2D2000
|
unkown
|
page readonly
|
||
|
7FFDFB398000
|
unkown
|
page readonly
|
||
|
7FFDFB2F0000
|
unkown
|
page readonly
|
||
|
1C671F5F000
|
heap
|
page read and write
|
||
|
7FFDFB2E0000
|
unkown
|
page readonly
|
||
|
1D2A4E95000
|
heap
|
page read and write
|
||
|
7FFDFB3C7000
|
unkown
|
page readonly
|
||
|
7FFDFB3A9000
|
unkown
|
page readonly
|
||
|
7FFDFB2E3000
|
unkown
|
page readonly
|
||
|
7FFDFB2BA000
|
unkown
|
page readonly
|
||
|
7FFDFB332000
|
unkown
|
page readonly
|
||
|
7FFDFB311000
|
unkown
|
page readonly
|
||
|
520000
|
heap
|
page read and write
|
||
|
7FFDFB332000
|
unkown
|
page readonly
|
||
|
1FE0000
|
heap
|
page read and write
|
||
|
7FFDFB364000
|
unkown
|
page readonly
|
||
|
7FFDFB385000
|
unkown
|
page readonly
|
||
|
7FFDFB2C2000
|
unkown
|
page readonly
|
||
|
7FFDFB2BA000
|
unkown
|
page readonly
|
||
|
7FFDFB3FC000
|
unkown
|
page readonly
|
||
|
7FFDFB356000
|
unkown
|
page readonly
|
||
|
7FFDFB2BE000
|
unkown
|
page readonly
|
||
|
16F59EE8000
|
heap
|
page read and write
|
||
|
7FFDFB3DB000
|
unkown
|
page readonly
|
||
|
7FFDFB325000
|
unkown
|
page readonly
|
||
|
7FFDFB395000
|
unkown
|
page readonly
|
||
|
7FFDFB2BA000
|
unkown
|
page readonly
|
||
|
7FFDFB377000
|
unkown
|
page readonly
|
||
|
7FFDFB314000
|
unkown
|
page readonly
|
||
|
7FFDFB3E8000
|
unkown
|
page readonly
|
||
|
7FFDFB3CA000
|
unkown
|
page readonly
|
||
|
7FFDFB353000
|
unkown
|
page readonly
|
||
|
529000
|
heap
|
page read and write
|
||
|
7FFDFB377000
|
unkown
|
page readonly
|
||
|
16F59D70000
|
heap
|
page read and write
|
||
|
7FFDFB367000
|
unkown
|
page readonly
|
||
|
7FFDFB2B8000
|
unkown
|
page read and write
|
||
|
7FFDFB301000
|
unkown
|
page readonly
|
||
|
16F5A080000
|
heap
|
page read and write
|
||
|
7FFDFB409000
|
unkown
|
page readonly
|
||
|
7FFDFB343000
|
unkown
|
page readonly
|
||
|
1C7B10B0000
|
heap
|
page read and write
|
||
|
7FFDFB374000
|
unkown
|
page readonly
|
||
|
7FFDFB385000
|
unkown
|
page readonly
|
||
|
7FFDFB322000
|
unkown
|
page readonly
|
||
|
7FFDFB3A6000
|
unkown
|
page readonly
|
||
|
7FFDFB2F0000
|
unkown
|
page readonly
|
||
|
7FFDFB3B9000
|
unkown
|
page readonly
|
||
|
2B0A8AC000
|
stack
|
page read and write
|
||
|
7FFDFB3EB000
|
unkown
|
page readonly
|
||
|
7FFDFB3DB000
|
unkown
|
page readonly
|
||
|
7FFDFB2C2000
|
unkown
|
page readonly
|
||
|
1C671F50000
|
heap
|
page read and write
|
||
|
7FFDFB388000
|
unkown
|
page readonly
|
||
|
7FFDFB343000
|
unkown
|
page readonly
|
||
|
7FFDFB3F8000
|
unkown
|
page readonly
|
||
|
7FFDFB2C2000
|
unkown
|
page readonly
|
||
|
7FFDFB335000
|
unkown
|
page readonly
|
||
|
52B000
|
heap
|
page read and write
|
||
|
7FFDFB356000
|
unkown
|
page readonly
|
||
|
7FFDFB3D7000
|
unkown
|
page readonly
|
||
|
7FFDFB3E8000
|
unkown
|
page readonly
|
||
|
7FFDFB2F0000
|
unkown
|
page readonly
|
||
|
7FFDFB2BE000
|
unkown
|
page readonly
|
||
|
7FFDFB2BA000
|
unkown
|
page readonly
|
||
|
7FFDFB2CF000
|
unkown
|
page readonly
|
||
|
7FFDFB261000
|
unkown
|
page execute read
|
||
|
7FFDFB395000
|
unkown
|
page readonly
|
||
|
7FFDFB261000
|
unkown
|
page execute read
|
||
|
7FFDFB356000
|
unkown
|
page readonly
|
||
|
7FFDFB388000
|
unkown
|
page readonly
|
||
|
16BD67A0000
|
heap
|
page read and write
|
||
|
7FFDFB367000
|
unkown
|
page readonly
|
||
|
7FFDFB332000
|
unkown
|
page readonly
|
||
|
7FFDFB2A1000
|
unkown
|
page readonly
|
||
|
7FFDFB409000
|
unkown
|
page readonly
|
||
|
7FFDFB377000
|
unkown
|
page readonly
|
||
|
16BD6720000
|
heap
|
page read and write
|
||
|
7FFDFB398000
|
unkown
|
page readonly
|
||
|
7FFDFB2B8000
|
unkown
|
page read and write
|
||
|
7FFDFB2C2000
|
unkown
|
page readonly
|
||
|
7FFDFB2E0000
|
unkown
|
page readonly
|
||
|
7FFDFB2F3000
|
unkown
|
page readonly
|
||
|
7FFDFB388000
|
unkown
|
page readonly
|
||
|
7FFDFB2D2000
|
unkown
|
page readonly
|
||
|
7FFDFB353000
|
unkown
|
page readonly
|
||
|
7FFDFB3CA000
|
unkown
|
page readonly
|
||
|
5DDBDCC000
|
stack
|
page read and write
|
||
|
7FFDFB3FC000
|
unkown
|
page readonly
|
||
|
7FFDFB3B9000
|
unkown
|
page readonly
|
||
|
7FFDFB3FC000
|
unkown
|
page readonly
|
||
|
7FFDFB385000
|
unkown
|
page readonly
|
||
|
7FFDFB2F3000
|
unkown
|
page readonly
|
||
|
7FFDFB409000
|
unkown
|
page readonly
|
||
|
7FFDFB3B6000
|
unkown
|
page readonly
|
||
|
7FFDFB388000
|
unkown
|
page readonly
|
||
|
7FFDFB3A9000
|
unkown
|
page readonly
|
||
|
7FFDFB2F3000
|
unkown
|
page readonly
|
||
|
180000
|
heap
|
page read and write
|
||
|
7FFDFB3B6000
|
unkown
|
page readonly
|
||
|
7FFDFB343000
|
unkown
|
page readonly
|
||
|
16BD6700000
|
heap
|
page read and write
|
||
|
7FFDFB335000
|
unkown
|
page readonly
|
||
|
7FFDFB3A9000
|
unkown
|
page readonly
|
||
|
7FFDFB2D2000
|
unkown
|
page readonly
|
||
|
7FFDFB3F8000
|
unkown
|
page readonly
|
||
|
7FFDFB3A9000
|
unkown
|
page readonly
|
||
|
7FFDFB364000
|
unkown
|
page readonly
|
||
|
7FFDFB260000
|
unkown
|
page readonly
|
||
|
7FFDFB304000
|
unkown
|
page readonly
|
||
|
7FFDFB311000
|
unkown
|
page readonly
|
||
|
7FFDFB314000
|
unkown
|
page readonly
|
||
|
7FFDFB325000
|
unkown
|
page readonly
|
||
|
7FFDFB3A9000
|
unkown
|
page readonly
|
||
|
7FFDFB260000
|
unkown
|
page readonly
|
||
|
7FFDFB3A6000
|
unkown
|
page readonly
|
||
|
7FFDFB311000
|
unkown
|
page readonly
|
||
|
7FFDFB335000
|
unkown
|
page readonly
|
||
|
16BD6620000
|
heap
|
page read and write
|
||
|
7FFDFB409000
|
unkown
|
page readonly
|
||
|
7FFDFB2E0000
|
unkown
|
page readonly
|
||
|
7FFDFB260000
|
unkown
|
page readonly
|
||
|
7FFDFB374000
|
unkown
|
page readonly
|
||
|
7FFDFB2E0000
|
unkown
|
page readonly
|
||
|
7FFDFB346000
|
unkown
|
page readonly
|
||
|
7FFDFB3E8000
|
unkown
|
page readonly
|
||
|
7FFDFB346000
|
unkown
|
page readonly
|
||
|
7FFDFB304000
|
unkown
|
page readonly
|
||
|
7FFDFB332000
|
unkown
|
page readonly
|
||
|
1C672240000
|
heap
|
page read and write
|
||
|
7FFDFB3FC000
|
unkown
|
page readonly
|
||
|
7FFDFB3DB000
|
unkown
|
page readonly
|
||
|
7FFDFB2CF000
|
unkown
|
page readonly
|
||
|
7FFDFB2B8000
|
unkown
|
page read and write
|
||
|
7FFDFB2BA000
|
unkown
|
page readonly
|
||
|
7FFDFB377000
|
unkown
|
page readonly
|
||
|
7FFDFB2CF000
|
unkown
|
page readonly
|
||
|
7FFDFB2D2000
|
unkown
|
page readonly
|
||
|
7FFDFB3DB000
|
unkown
|
page readonly
|
||
|
7FFDFB356000
|
unkown
|
page readonly
|
||
|
7FFDFB385000
|
unkown
|
page readonly
|
||
|
7FFDFB353000
|
unkown
|
page readonly
|
||
|
7FFDFB409000
|
unkown
|
page readonly
|
||
|
7FFDFB3B9000
|
unkown
|
page readonly
|
||
|
7FFDFB3A6000
|
unkown
|
page readonly
|
||
|
7FFDFB353000
|
unkown
|
page readonly
|
||
|
7FFDFB2CF000
|
unkown
|
page readonly
|
||
|
7FFDFB3EB000
|
unkown
|
page readonly
|
||
|
7FFDFB2E3000
|
unkown
|
page readonly
|
||
|
7FFDFB301000
|
unkown
|
page readonly
|
||
|
7FFDFB311000
|
unkown
|
page readonly
|
||
|
7FFDFB260000
|
unkown
|
page readonly
|
||
|
83229AC000
|
stack
|
page read and write
|
||
|
7FFDFB261000
|
unkown
|
page execute read
|
||
|
7FFDFB3E8000
|
unkown
|
page readonly
|
||
|
1C7B1530000
|
heap
|
page read and write
|
||
|
7FFDFB398000
|
unkown
|
page readonly
|
||
|
1C672245000
|
heap
|
page read and write
|
||
|
7FFDFB346000
|
unkown
|
page readonly
|
||
|
7FFDFB3F8000
|
unkown
|
page readonly
|
||
|
7FFDFB2BE000
|
unkown
|
page readonly
|
||
|
16BD67C0000
|
heap
|
page read and write
|
||
|
7FFDFB301000
|
unkown
|
page readonly
|
||
|
7FFDFB322000
|
unkown
|
page readonly
|
||
|
4FD948C000
|
stack
|
page read and write
|
||
|
7FFDFB3CA000
|
unkown
|
page readonly
|
||
|
7FFDFB3EB000
|
unkown
|
page readonly
|
||
|
7FFDFB301000
|
unkown
|
page readonly
|
||
|
7FFDFB385000
|
unkown
|
page readonly
|
||
|
7FFDFB3A6000
|
unkown
|
page readonly
|
||
|
1C0000
|
heap
|
page read and write
|
||
|
7FFDFB335000
|
unkown
|
page readonly
|
||
|
7FFDFB2A1000
|
unkown
|
page readonly
|
||
|
16F59EE0000
|
heap
|
page read and write
|
||
|
7FFDFB2BE000
|
unkown
|
page readonly
|
||
|
7FFDFB385000
|
unkown
|
page readonly
|
||
|
7FFDFB2C2000
|
unkown
|
page readonly
|
||
|
7FFDFB3C7000
|
unkown
|
page readonly
|
||
|
7FFDFB3F8000
|
unkown
|
page readonly
|
||
|
7FFDFB3CA000
|
unkown
|
page readonly
|
||
|
7FFDFB322000
|
unkown
|
page readonly
|
||
|
7FFDFB2B8000
|
unkown
|
page read and write
|
||
|
7FFDFB325000
|
unkown
|
page readonly
|
||
|
7FFDFB3A9000
|
unkown
|
page readonly
|
||
|
7FFDFB2F0000
|
unkown
|
page readonly
|
||
|
7FFDFB3E8000
|
unkown
|
page readonly
|
||
|
16BD67A5000
|
heap
|
page read and write
|
||
|
7FFDFB322000
|
unkown
|
page readonly
|
||
|
7FFDFB3A6000
|
unkown
|
page readonly
|
||
|
7FFDFB3C7000
|
unkown
|
page readonly
|
||
|
7FFDFB261000
|
unkown
|
page execute read
|
||
|
7FFDFB395000
|
unkown
|
page readonly
|
||
|
7FFDFB322000
|
unkown
|
page readonly
|
||
|
7FFDFB3EB000
|
unkown
|
page readonly
|
||
|
1C7B10C0000
|
heap
|
page read and write
|
||
|
7FFDFB343000
|
unkown
|
page readonly
|
||
|
7FFDFB2E3000
|
unkown
|
page readonly
|
||
|
7FFDFB335000
|
unkown
|
page readonly
|
||
|
7FFDFB2A1000
|
unkown
|
page readonly
|
||
|
7FFDFB398000
|
unkown
|
page readonly
|
||
|
7FFDFB367000
|
unkown
|
page readonly
|
||
|
7FFDFB2BA000
|
unkown
|
page readonly
|
||
|
7FFDFB261000
|
unkown
|
page execute read
|
||
|
7FFDFB2D2000
|
unkown
|
page readonly
|
||
|
7FFDFB2A1000
|
unkown
|
page readonly
|
||
|
7FFDFB395000
|
unkown
|
page readonly
|
||
|
7FFDFB260000
|
unkown
|
page readonly
|
||
|
7FFDFB3D7000
|
unkown
|
page readonly
|
||
|
1C7B1180000
|
heap
|
page read and write
|
||
|
7FFDFB374000
|
unkown
|
page readonly
|
||
|
7FFDFB3DB000
|
unkown
|
page readonly
|
||
|
16BD67C8000
|
heap
|
page read and write
|
||
|
7FFDFB3B6000
|
unkown
|
page readonly
|
||
|
7FFDFB346000
|
unkown
|
page readonly
|
||
|
7FFDFB325000
|
unkown
|
page readonly
|
||
|
7FFDFB3C7000
|
unkown
|
page readonly
|
||
|
7FFDFB374000
|
unkown
|
page readonly
|
||
|
7FFDFB2A1000
|
unkown
|
page readonly
|
||
|
7FFDFB2F0000
|
unkown
|
page readonly
|
||
|
7FFDFB346000
|
unkown
|
page readonly
|
||
|
7FFDFB356000
|
unkown
|
page readonly
|
||
|
16F59E50000
|
heap
|
page read and write
|
||
|
7FFDFB2A1000
|
unkown
|
page readonly
|
||
|
7FFDFB343000
|
unkown
|
page readonly
|
||
|
7FFDFB2F0000
|
unkown
|
page readonly
|
||
|
7FFDFB3B6000
|
unkown
|
page readonly
|
||
|
190000
|
heap
|
page read and write
|
||
|
7FFDFB3B9000
|
unkown
|
page readonly
|
||
|
7FFDFB2CF000
|
unkown
|
page readonly
|
||
|
7FFDFB3C7000
|
unkown
|
page readonly
|
||
|
7FFDFB311000
|
unkown
|
page readonly
|
||
|
7FFDFB398000
|
unkown
|
page readonly
|
||
|
7FFDFB2E3000
|
unkown
|
page readonly
|
||
|
7FFDFB3FC000
|
unkown
|
page readonly
|
||
|
7FFDFB3C7000
|
unkown
|
page readonly
|
||
|
7FFDFB3FC000
|
unkown
|
page readonly
|
||
|
1C671F10000
|
heap
|
page read and write
|
||
|
537000
|
heap
|
page read and write
|
||
|
7FFDFB377000
|
unkown
|
page readonly
|
||
|
7FFDFB343000
|
unkown
|
page readonly
|
||
|
7FFDFB3CA000
|
unkown
|
page readonly
|
||
|
1D2A4E90000
|
heap
|
page read and write
|
||
|
7FFDFB2BE000
|
unkown
|
page readonly
|
||
|
7FFDFB2E3000
|
unkown
|
page readonly
|
||
|
7FFDFB301000
|
unkown
|
page readonly
|
||
|
7FFDFB3D7000
|
unkown
|
page readonly
|
||
|
7FFDFB332000
|
unkown
|
page readonly
|
||
|
7FFDFB304000
|
unkown
|
page readonly
|
||
|
7FFDFB314000
|
unkown
|
page readonly
|
||
|
7FFDFB364000
|
unkown
|
page readonly
|
||
|
16BD8210000
|
heap
|
page read and write
|
||
|
16F5A085000
|
heap
|
page read and write
|
||
|
695000
|
heap
|
page read and write
|
||
|
7FFDFB311000
|
unkown
|
page readonly
|
||
|
7FFDFB395000
|
unkown
|
page readonly
|
||
|
1D2A4BE8000
|
heap
|
page read and write
|
||
|
690000
|
heap
|
page read and write
|
||
|
1D2A4D00000
|
heap
|
page read and write
|
||
|
7FFDFB332000
|
unkown
|
page readonly
|
||
|
7FFDFB3EB000
|
unkown
|
page readonly
|
||
|
1C671F00000
|
heap
|
page read and write
|
||
|
1D2A4BE0000
|
heap
|
page read and write
|
||
|
7FFDFB2C2000
|
unkown
|
page readonly
|
||
|
7FFDFB2CF000
|
unkown
|
page readonly
|
||
|
7FFDFB3B6000
|
unkown
|
page readonly
|
||
|
7FFDFB395000
|
unkown
|
page readonly
|
||
|
1D2A4CE0000
|
heap
|
page read and write
|
||
|
7FFDFB304000
|
unkown
|
page readonly
|
||
|
1C672190000
|
heap
|
page read and write
|
||
|
7FFDFB3CA000
|
unkown
|
page readonly
|
||
|
7FFDFB2F3000
|
unkown
|
page readonly
|
||
|
7FFDFB2D2000
|
unkown
|
page readonly
|
||
|
7FFDFB314000
|
unkown
|
page readonly
|
||
|
7FFDFB3A6000
|
unkown
|
page readonly
|
||
|
1C671F58000
|
heap
|
page read and write
|
There are 322 hidden memdumps, click here to show them.